In this instructor-led course students will learn how to efficiently use AWS security services for optimal security and compliancy in the AWS cloud. This course focuses on the AWS-recommended best practices that you can implement to enhance the security of your data and systems in the cloud. The course highlights the security features of AWS key services including compute, storage, networking, and database services. This course also refers to the common security control objectives and regulatory compliance standards.
Intermediate
AWS Certified Security – Specialty
Curriculum
- 8 Sections
- 68 Lessons
- 14h 20m Duration
Introduction to Amazon AWS Security
2 Lessons
- Amazon Security basics
- AWS Security and compliance
Associate Level Review
6 Lessons
- Global infrastructure review
- Elastic Compute Cloud (EC2)
- Lambda
- VPC review
- S3 review
- EC2 load balancers
Services Review
5 Lessons
- IAM review
- KMS
- CloudWatch, CloudTrail, and config
- Firewall
- More security and Identity Services
Incident Response
3 Lessons
- Incident Response
- Steps for installing Inspector Agent and SSM Agent
- Configuring alarms
Identity and Access Management
8 Lessons
- Policy evaluation order
- IAM users and rules
- Best practices for IAM users and account security
- Cross account access
- AWS organization
- SCP guard rails
- Account security status
- AWS cognito and web identity federation
Infrastructure Security
22 Lessons
- VPCs
- Setting up VPCs
- Network Access Control Lists (NACLs)
- VPC peering
- VPC endpoints
- VPC endpoint policies
- Systems manager setup
- AWS system manager patch management
- AWS system manager parameter store
- AWS system manager run command
- Amazon inspector
- AWS load balancers
- Security with AWS CloudFront
- AWS Trusted Advisor
- Web application firewall
- AWS Shield
- AWS Guard Duty
- Amazon Macie
- AWS Artifact
- AWS network firewall
- AWS Lambda security
- Penetration testing
Logging and Monitoring
8 Lessons
- Cloud monitoring tools
- Working with CloudWatch
- Working with Simple Storage Service (S3)
- Working with CloudTrail
- CloudTrail Cross-Account logging
- Working with CloudWatch
- AWS config and conformance packs
- VPC Flow logs and AWS Athena
Data Protection
14 Lessons
- S3 Overview
- IAM policies, bucket policies, and ACLs
- S3 encryption
- S3 pre-signed url
- S3 cross region replication
- Amazon S3 access tiering and Glacier
- KMS overview and operations
- AWS KMS key policies and grants
- Using KMS with S3 and EBS
- Using VPC endpoints with KMS
- Deleting customer KMS keys
- Cloud HSM
- EC2 encryption with key pairs
- Using certificate manager with CloudFront
